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5^ . Abstract 

We investigate performance bounds for feedback stabilization of distributed plants where 
each subsystem controller can use outputs from the whole plant ("centralized control"), but 
the outputs only give differences between neighboring subsystem states. Such "distributed 
sensing" can be a technological necessity in applications where system size exceeds accuracy 
requirements by many orders of magnitude. We formulate how distributed sensing generally 
limits feedback performance robust to measurement noise and to model uncertainty, without 
assuming any controller restrictions (among others, no "distributed control" restriction). A 
major consequence is the necessity to cut down integral action on some modes. We partic- 
ularize the results to spatially invariant systems and finally illustrate our developments on 
realistic case study: stabilizing the segmented primary mirror of the European Extremely 
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Large Telescope. 
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en ■ 1 Introduction 

in 

>0 The massive availability of sensors and actuators in our environment is an opportunity to address 

■<^J- \ large-scale problems by exploiting their interaction. The control of interacting localized subsystems 

(distributed plants) has drawn tremendous interest in the last decades, covering e.g. agreement 
(consensus) in computer networks [30] , synchronization of dynamical systems [23J I2Z] or collective 
robotic task solving [9 . A defining property is the information sharing between subsystems — 
information content and interconnection topology. Common distinctions are reference-following 
[T5] vs. autonomous coordination / spontaneous ordering [37] and centralized vs. distributed con- 
trol [3J 2J [11] [T3J [TTJ [25] . In centralized control, each local action is a function of measurements all 
over the system. The distributed control paradigm [?J [TTJ [T7J [2S1 [2] imposes a localized coupling 
in closed-loop: each local action depends on neighboring subsystem outputs only. 

The present paper shows how, ahead of the controller choice, structural restrictions on the 
state-to- output map of a distributed plant can fundamentally constrain the performance of the 
feedback system. Specifically, we consider systems whose outputs are differences between neigh- 
boring subsystem states. Unlike in distributed control, we impose no restriction on the controller 
itself, allowing the resulting outputs to be used in any — in particular, centralized — control 
computation. We call this "local relative sensing" or "distributed sensing". It is motivated by 
applications in which communication capabilities allow to quickly broadcast all outputs and con- 
trol signals — questioning a priori restrictions on controller structure — but sensor technology 
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does not allow accurate enough absolute state measurements over the entire plant. This occurs 
in multi-scale problems, where accuracy requirements and plant size differ by many orders of 
magnitude. 

The setting is inspired by our study of primary mirror stabilization for the European Extremely 
Large Telescope (EELT) [7]. We therefore propose indicative analytical results — for a general 
case and for 1-degree-of-freedom spatially invariant systems — followed by an illustration on 
this realistic case study. We focus on two concerns. First, we analyze how distributed sensing 
influences the sensor noise vs. disturbance rejection tradeoff, using the sensitivity transfer functions 
of classical linear control theory [TJ [5] . Second, we show how badly measurement model errors can 
affect robustness. A major concrete consequence is the necessity to cut down integral action on 
some modes. 

Effects of noise and perturbations in distributed systems arc examined in various ways in the 
literature. One line of work restricts not only sensing, but also control, to local relative coupling 
(i.e. distributed control, see e.g. [31121 HI]). The authors of [3] study bounds on state estimation 
from noisy local relative measurements in a static setting, focussing on absolute state reconstruc- 
tion as a function of distance to a 'leader' subsystem. Optimal controllers for spatially invariant 
plants are investigated in |3]; for a locally coupled plant, the optimal gains decay exponentially 
as a function of distance between actuated and measured subsystems. This supports the use of 
distributed control, for which [3] investigates performance limitations on a benchmark spatially 
invariant system. The robustness issue, that we first raised in [7J, has been observed numerically 
with /x-analysis for the segmented mirror application |21j . Segmented mirror stabilization has been 
investigated by a few teams associated to Extremely Large Telescope projects [HjI HH [3T] . In [TB] 
the distributed sensing issue is put aside by assuming absolute state knowledge. 

The paper is organized as follows. Section [2] formalizes distributed sensing and gives two 
motivating examples: a benchmark vehicle-chain problem and segmented mirror stabilization. 
Section |31 formulates how sensor noise (13.11) and model errors (I3.2[) induce performance limitations. 
Section 0] particularizes to 1-degree-of-freedom spatially invariant systems. Section [3] illustrates 
our point on EELT primary mirror stabilization. 

Notation: We write i = yj—l the imaginary unit. The element on row j, column k of matrix 
C £ £ lxm i s denoted (C)j^- C T and C* respectively denote transpose and complex conjugate 
transpose of C, and (g> the Kronecker product of two matrices. We denote c £ C' a column vector, 
H c ll = \/Hk l c fcl 2 its Euclidean norm. I, n £ R mxm is the identity matrix and l m £ M m the 
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column- vector of all ones. We interpret s + C = s I m + C if s £ C and C £ C mxm . For D £ 
diagonal and / a scalar function, Y = f(D) £ C mxm is diagonal with (Y)k,k = I{{D)k,k) for all 
k. 

2 Distributed sensing in multiscale problems 

We consider a Laplace-domain model 

x (s) = G(s) [u(s) + d(s)} (1) 

y(s) = [B + A]x(s)+n(s) (2) 

u(s) = -C(s)y(s) (3) 

to represent M 3> 1 coupled TV-dimensional subsystems. Components kN+1 to (k+l)N of 
x(s),u(s),d(s) £ C Nm denote states, inputs and disturbances of subsystem k in the Laplace 
domain, with N x — NM. We assume that the plant governed by G(s) is stable and fully ac- 
tuated, to focus on implications of sensing. Output y(s) £ C Ny is obtained through the static map 
[B + A] £ M. NyXN:c , where B is the nominal sensor behavior and A a sensor model error. Each 
sensor output is corrupted by zero-mean independent identical Gaussian white noise, represented 
by n(s) with covariance matrix a 2 In . For ease of presentation we assume N y > N x . The purpose 
of controller C(s) £ C NxXNy is to stabilize x — 0, rejecting disturbances d(s). Importantly, we do 
not restrict the controller ^ to be distributed, i.e. we allow C(s) to be a full matrix. We also 



allow the disturbances on different subsystems to be correlated, by investigating how a general 
vector d(s) affects the controlled plant. This differs from e.g. [3] [15] which examine x for a given 
disturbance distribution (and controller). 

The central element of our investigation is local relative state measurement. 
Let q k = {kN+1, kN+2, ..., (k+l)N}. 

Definition 1: B gives (unit-gain) relative measurements between subsystem states if for each 
I G {1, ...,N y } there exist Qj, qk such that 

1. (B)i >m = for m g qj U q k 

= Em£ 9 i \( B )l,m\ = -J2 m eq k ( B )','n = 1 • 

The interpretation of Definition 1 is that each row I of B measures the difference between a 
convex combination of states of subsystem j and a convex combination of states of subsystem 
k. For N = 1, B T would be the oriented incidence matrix of some graph Tb, where subsystems 
are nodes and sensors are edges; for N > 1, B T has the interpretation of a generalized incidence 
matrix, with matrix- valued weights on each edge [5] . The (generalized) Laplacian matrix of Tb is 
L = B T B. If (L)i yTn j^ for some I G qj and m G (ft, then subsystems j and fe are connected in 

r B . 

Definition 2: A spatial structure S of dimension 76N associates a position p(k) G M 7 to each 
subsystem k such that ||p(fc) — p(l)\\ > 1 for I ^ k. 

Definition 3: Given a spatial structure and a fixed spatial range p > 1, output map _B gives 
ZocaZ relative measurements of range p if it gives relative measurements (Definition 1) and it only 
connects in Tb subsystems for which \\p(k) — p(OII ^ P- We call such a situation distributed 
sensing. 

Many decentralized control settings associate a local output to each subsystem (graph node). 
With distributed sensing in contrast, outputs are the result of interactions between subsystems 
(graph edges). 

Remark Local sensing has no meaning if it is not relative. Sensors giving "absolute" e.g. posi- 
tions actually physically measure positions with respect to a common ("central") reference, that 
has to be physically shared among all sensors. Measuring absolute state values thus corresponds, 
in our framework, to centralized sensing. This is also acknowledged in the robotics community, 
distinguishing local=onboard from global=offboard sensors, see e.g. [29j Chapter 3]. 

We study disturbance rejection limitations due to distributed sensing with £j <^ 1. This arises 
in applications where M increases with the size of a large-scale plant while p is limited by sensor 
technology, as in the following examples. 

2.1 Vehicle chain application 

A basic objective of e.g. automated highway driving is to maintain constant inter- vehicle distance 
in a vehicle chain }28j . Centralized sensing determines vehicle positions with respect to a common 
reference, typically using the Global Positioning System (GPS). GPS accuracy — limited by 
atmospheric effects to the order of a few meters — is remarkable on the global scale, but likely 
insufficient to avoid collisions on a crowded highway. In local relative sensing, each vehicle directly 
measures the distance to its neighboring vehicles, easily up to centimeter-accuracy. 

We can define vehicle configuration (x)k — s k~ fk G K with Sk the coordinate of vehicle k along 
the road and ru its desired coordinate, typically r^ = k r^ in a moving frame with r^ the desired 
distance between vehicle centers. Vehicles are controlled (u) and disturbed (d) by forces. Local 
relative sensors compare actual relative positions of consecutive vehicles, (y)k — Sfc+i — Sh — r c i = 
(x)k+i ~ (x)k- The interconnection topology, (B)k.k+i = —(B)k,k = 1 Vfc and all other (-B)fcj = 
(path interconnection), can be generated from spatial a structure p(k) = k G M with p G (1,2). 




Figure 1: The EELT primary mirror made of 984 segments. 
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Figure 2: Left: actuation and sensing architecture. Position actuators (PACT) operate the seg- 
ment's piston, tip and tilt degrees of freedom. Edge sensors (ES) measure local relative displace- 
ment of the segments. Right: points (zfci,Zfc2>Zfc3) used to define segment configuration. 



It is useful to relate our viewpoint to existing studies of this benchmark problem. Our concern 
differs from string stability |28j , which restricts its attention to a perturbation on the first vehicle 
and studies how it propagates along the chain (in ideal conditions). [3] imposes distributed control, 
i.e. each vehicle relies on outputs from local sensors only. Instead, we allow each vehicle to use 
all information gathered by the set of sensors. By leaving the controller free to choose, we also 
allow antisymmetric coupling, which is termed "mistuned control" in [B] and improves disturbance 
rejection. 

2.2 Segmented mirror application 

This paper has been inspired by our involvement [8] in designing a controller to stabilize the 
segmented primary mirror of the European Extremely Large Telescope (EELT, see (T3} [31]). This 
telescope, run by the European Organization for Astronomical Research in the Southern Hemi- 
sphere (ESO), will offer unprecedented optical observation capabilities thanks to its primary mirror 
(Ml) of world-record 42 m diameter [T31 |BT] - Its construction has started in 2012. 

The scientific objective requires the light wave reflected by Ml to differ from an ideal one by 
less than 10 nm root-mean-squared, after a linear filter that models adaptive optics corrections 
elsewhere in the telescopqj. One-piece static mirrors meeting this accuracy under disturbances are 
currently limited to ~ 9 m diameters. Ml is therefore composed of M = 984 hexagonal segments 
of 0.7 m edge length, see Fig. [TJ which are actively stabilized. The huge scale factor between the 
10 nm accuracy requirement and the 42 m mirror size makes it technologically impossible to rely 
on segment displacement measurements with respect to a common reference. "Edge sensors" (ES) 
therefore measure the relative displacement, perpendicular to mirror surface, of adjacent segment 
edges (see Fig. [5]). 

Disregarding in-plane motions of the segments (which have no optical effect), we consider 
N = 3 degrees of freedom corresponding to piston, tip and tilt (PTT) of each segment (i.e. for 
a telescope pointing to zenith: vertical position and rotation around two horizontal axes), so 
x G M 2952 . We write the model after a coordinate change from the curved nominal mirror shape 
to a horizontal reference plane. Denoting ir^ the plane in R 3 which contains mirror segment 



See [7] [8] for more about this "wavefront error" 



k, define (x3k-2,Xzk-i-,%zk) the height w.r.t. reference plane of 3 points Zfci,Zjfe2)Zfc3 £ ^k po- 
sitioned as depicted on Fig. [2[ right. Then the height of each point of segment k is a convex 
combination of {x3k-i-,%3k-i,%3k)- Each edge sensor measures the difference between two such 
convex combinations and thus fits Definition 1 of relative sensing. The spatial structure can be 
defined by p(/c)=horizontal position of the center of segment k in the hexagonal lattice £ M 2 , and 
p £ (0.7v3, 0.7 • 3) meters. The number of adjacent edges yields N y = 5604 sensors. 

To control its 3 degrees of freedom, each segment is supported by 3 position actuators (PACT) 
which move perpendicularly to the mirror surface and whose force commands make up u £ IR 2952 . 
The small displacements involved allow for a linear model G(s), discussed in Section [5] Wind 
force is the strongest varying part in d, with characteristic frequencies below a few ynHz, and is 
spatially correlated among the segments. A second main component of d, motivating feedback 
control, are quasi-static disturbances: thermal effects and gravity on the moving mirror induce 
deformations of very low temporal frequency but high amplitude (~ 1 mm) . Noise n is realistically 
modeled as white Gaussian with lnm/VHz power distribution for each sensor. 

2.3 Geometrical considerations on distributed sensing 

Relative sensing reflects state space invariance: sensors are insensitive to a common deviation of all 
system states since Bx — B (x + alAr x ), for any a £ K. This state space invariance |24j . involving 
x, should not be confused with the spatial invariance of [2111], involving translations along spatial 
index k. 

Local relative sensing can be viewed as measuring a spatial derivative: ,, TT&E^fm ls the stan- 
dard Euler discretization of the derivative of x in direction p(k) — p(l), evaluated at £Ll2±£Li. 
The approximation holds for x varying on characteristic spatial scales much larger than \\p(k) — 
p(l)\\- For large M, an analogy with PDEs can therefore give insight for feedback design, see 
e.g. [SJ [T|)J [53] , although a rigorous link is tricky to establish [ID]. The strong sensitivity to par- 
ticular model errors A which we highlight in Section 13.21 is analog to the drastic changes in PDE 
properties under small perturbations that change the dominant spatial derivatives. 

3 Distributed sensing limits performance 

3.1 Sensitivity and spectral graph properties 

Like in classical control theory, the sensitivity and the complementary sensitivity are key transfer 
functions to capture the performance limitations of the feedback system. We take A = but 
n t^ in ([2]) . Since B B T B has the same range and kernel as B and there is no incentive to assign 
any controller gain to pure noise, we can write C(s) = C a (s) BB T =: Cb(s) B T in ([3]) such that 
the closed-loop system ([I])-© becomes (s dropped) 

x=[I Ni +GC b L]- l [Gd + GC b B T n] (4) 

where L = B T B. Write eigendecomposition L = QAQ T with Q orthogonal and eigenvalues 
Afe := (A)f-,k ordered as Ai > A2 > ... > \n x > 0. Defining x = Q T x and K b {s) = Q T G(s) Cb(s) Q 
in ([4]) we get x = [ In x +K b A]~ 1 [Q T G d + K b Q T B T n ] . Since we impose no restriction on the 
controller, we can view K b (s) as a freely tunable matrix transfer functiorQ Moreover, disregarding 
(temporarily) the singular modes of A, view K(s) — K b (s)A £ C NxXN:c as a tunable loop transfer 
function. Then ^ becomes 

*(«) = i I N :c +K{s)}- 1 5(s) + [I Nx +K(s)]- 1 K{s)v(s) (5) 

where v(s) := A -1 Q T B T n(s) £ C Nx is rescaled noise and S(s) := Q T G(s)d(s) is the open- 
loop deviation of x(s) induced by d(s). In the single-input / single-output case, expression ([5]) 



2 Issues like pole-zero cancellation and controller realizability, not specific to distributed sensing, are thereby 
ignored. They reduce to their SISO counterpart if Q T G(s)Q is diagonal in some (s-independent) basis, which 
occurs e.g. when G(s) is a scalar multiple of the identity matrix. 



-t I 1 

(V)5 (y) 10 (y)i 



+1 

/AT,,. 



Figure 3: Poorly observable state Xi constructed for the proof of Proposition 1, in a ID context 
with N x = 20, N c — 4, j3 — 1/20, assuming the sensing range extends to direct neighbors only. 
Each bar represents (Xi)k for a given k, with x proportional to vertical position and subsystem 
index k varying along the horizontal direction; (37)5, (j/)io an d (y)i5 are the only sensor outputs 
on the figure that differ from 0. 

formulates the classical tradeoff between sensitivity S = 1+ ] i i s \ and complementary sensitivity 

T = 1+ jfAi = 1 — S. The specificity of distributed sensing is how v relates to n, namely how the 
spectrum of the Laplacian L scales the effect of measurement noise. 

Lemma 1: If n(s) is distributed according to a zero-mean Gaussian of covariance a 2 In , then 
v(s) is distributed according to a zero-mean Gaussian of covariance cr A . 

Proof: Write the singular value decomposition B = UY.V T where U £ M. NyXNx has orthonormal 
columns, V £ R N * xN * is orthogonal and £ £ R N * xN * diagonal. L = B T B allows to identify 
V = Q and S = A 1 / 2 . Thus v = A" 1 Q T QYAJ T n = k^^Xf 1 n. As U T n is an orthonormal 
projection of n on some subspace, it has a zero-mean Gaussian distribution with covariance matrix 
<t 2 /jv x . Gain l/y/\k on (U T n)k multiplies its er 2 -variance by 1/Afe. D 

Unobservable modes, for which Afc = 0, appear with infinite noise gain in ([S]) unless they have 
zero gain in K(s) — the only actual possibility. As L ljv^ = 0, there is at least one unobservable 
mode, corresponding to uniform deviation of all states. The following proposition shows how 
distributed sensing implies that, for M>1, many other modes k have Ai- < 1. 

Proposition 1: Consider distributed sensing with a given spatial structure of dimension 7 and 
a given range p > 1 and let D m the maximal number of sensors connected to a given subsystem. 
Then for any (small) c, N c > 0, there exists a (large enough) number of subsystems M such that: 
L = B T B has at least N c eigenvalues Xk smaller than c, for any model of distributed sensing 
among M subsystems according to parameters p, 7, and D m . 

Proof: A few computations on eigenvalue bounds yield: if there are N c orthonormal vectors 
X{ £ Mr* for which ||i?ari|| < b = ■=?-, then L = B T B has at least N c eigenvalues smaller than c. 
We explicitly build such Xi- 

Given N c , bounds on D m , p and 7 for distributed sensing, and any /? > 0, the spatial structure 
ensures that for sufficiently large N x , any compatible distributed sensing system can be partitioned 
into Af c groups of subsystems such that: 

(i) each group contains an equal number N x /N c of states and 

(ii) the maximum number of sensors connecting a subsystem of group j with a subsystem of 
group k 7^ j, over all group pairs (j, k), is bounded by /3 N x . 
We build the x% by assigning the same value £ { — fc= , -S= } to all the state components of a 
same group; see Fig. [3] for a schematic illustration. Without loss of generality, assume N c to be a 
power of 2. Then N c orthogonal such Xi can be built by associating + or — signs to the groups 
according to the elements of a Walsh code, as used in CDMA communication (see e.g. [H]). This 
code includes the vector xq where the state is a multiple of 1at x (unobservable, ||£xo|| = 0). 
For the other #j, it assigns — signs to precisely N c /2 groups. Then from (ii), Bxi has at most 
@N X c ^ 4 C ~ ' nonzero components, of value ±2/y/N x , such that ||-Bxj|| < \J '(3N C (N C — 1). Thus 



4 
taking the initial (3 < c 2 /(N^ (N c -1)) yields the result. □ 

The bound D m avoids that an arbitrarily large number of sensors can be used to perform the 

same measurement, i.e. that a valid distributed sensing model B can be replaced by 1n s (g> B 

with arbitrarily large N s ; this would indeed statistically improve the signal-to- noise ratio in a 

way that is not practically meaningful. The proof constructs poorly observable states by letting 

concerted deviations of large parts of the distributed system (e.g. large subareas of the telescope 



mirror) induce only a few discontinuities that affect sensor outputs, see Fig. [31 These are not the 
only "poorly observable" deformations. For settings with more structure, like in [5] or Section [4] 
of the present paper, one can construct even less observable deformations that have a different 
interpretation. Proposition 1 focuses on worst-case modes, in contrast to J3J [H] which consider 
a mean over all modes. This is particularly relevant if, like in the EELT application, unfavorable 
5 are dominant. Indeed, for this application (see Section [SJ, a major disturbance source is wind 
force, which naturally features correlations on long spatial scales, the most poorly observable. 

It is the combination of relative and local properties that gives bad sensing. If absolute states 
were accessible, we could have B = 7jv x so v = n. If non-local state comparisons were allowed, 
we could have e.g. (y) k — [x)k — {x)\ for k = 1,2, ...,M, taking N = 1; then L is the Laplacian 
of a star graph and (Ai, A2, A3, ..., Ajw_i, \m) — (M, 1, 1, ..., 1, 0), so apart from one unobservable 
mode the variance of (u)j is at most er 2 . 

3.2 Robustness to sensing model errors 

We consider measurement model uncertainty A with 

(A) fc> , e [-e(B) kt i,+e(B) kil ] for all M (6) 

unknown, i.e. each component of B is (independently) subject to a relative uncertainty e, for some 
given e«1. This uncertainty does not change the interconnection graph T^. 

Repeating the development of Section 137X1 with n = and A^O yields, similarly to ([5]), 



x(s) = [In. + K{s) [J Na + $] J- 1 5(a) (7) 

where $ = A -1 Q T B T A Q = A -1 / 2 U T AQ, with singular value decomposition B = UK l / 2 Q T as 
in Lemma 1. Note that in general A is singular and the correct result is obtained by taking its 
pseudo-inverse in the definition of $, i.e. treating the lines No + 1 to N x of $ equal to zero, where 
No is the index of the last nonzero eigenvalue of A. (By construction the columns Nq + 1 to N x 
of K equal zero.) For robust stability, the zeros of det( Iff x + K(s) \In x + $] ) must have negative 
real part for any possible $. 

We next analyze which properties on uncertainty $ are bad for stability. By standard matrix 
properties, det( I^ x +K(s) [1^ +$] ) = det( In + K(s) [/jv + $] ), where K (resp.$) contains the 
A^o first columns and rows of K (resp.<I>). From ([5]), it seems reasonable to assume K(s) symmetric 
positive definite for any s € M>o (negative feedback). Then, considering real positive s, we have 
det(/Ar -I- K(s) [I No + $]) = ^ det(K(s)~^ 1 + I No + $) = . Thus problems appear if $ "gets 
too negative (in a matrix sense)" . Consider for instance the hypothetical case of a disturbance 
$ = $b defined by 

ran J° for (k,l) ^ (b,b) 

($fc)fe <'- \ 6 <O for (k,l) = {b,b) ■ (8) 

We will approach this situation with an explicit construction later. Then we get: 

Proposition 2: If a sensing model error A can lead to a disturbance $ = $f, as in ([5J with 
(fib < —1, then to ensure robust stability the element (K(s))b.b of a symmetric positive definite 
feedback gain K(s) must be limited to (K(s))b.b < 1 / |1 + <Pb\ for all positive real s. 

Proof: If 1 +</>{, < —l/(K(s))b,b, then K(s)~ 1 +lN +<&b has a negative eigenvalue, thus it has azero 
eigenvalue for some smaller model error <&p = /3$f, with /3 £ (0, 1); i.e. det(7jv x +K(s) [In^ +^13} ) 
has a zero with positive real s. □ 

The point is that, given a nominal model with distributed sensing, a $;, with significant value 
of (f>b can be constructed from very small uncertainties in A. Indeed, the particular error Vfe, I : 

(A) fci , = -sign[([/) M ] • sign[(Q)^] • e \ {B) k;l \ (9) 

yields a maximally negative ($)&,6 = —fa J2k.i \( B )kA ' l(^)fc,6| ' \(Q)l,b\ =■ 4>b- Here small 
values of Af, can lead to a strongly amplified model error, in particular a \<fib\ > 1 despite retaining 



e-small uncertainty on each component of A. Numerical investigations on practical examples show 
that often with (adaptions of) Q, for some of the largest b < No we can obtain: ($)&,& largely 
dominates all the other elements of $, so that $ w $& given by © for our purposes. This shows 
that distributed sensing makes us dangerously close to the conditions of Proposition 2. 

Consequence: From ([5]), a limitation on K(s) as expressed by Proposition 2 implies limited 
disturbance rejection. Thus poorly observable modes have poor static disturbance rejection as a 
tradeoff for robustness. Most strikingly, integral control cannot be used for those modes where 
Proposition 2 applies. 

It should be noted that a disturbance as proposed in Q does not retain the symmetry owing 
to relative sensing, i.e. A does not satisfy 

£,( a )m = Vfc. (10) 

It is by breaking the symmetry of relative sensing that small errors can create large disturbances, 
analogously to changing the type of a PDE. In contrast, uncertainties that preserve the relative 
sensing symmetry (such as uncertainties in each sensor's gain) are easily shown to be much less 
detrimental to robust stability. However, many physical situations can plausibly lead to model 
uncertainties that violate (|10[) . In the EELT example (see Fig. [5]), each sensor consists of two parts 
fixed on adjacent segment edges and its output value depends on the 3-dimensional relative motion 
of these parts. As a result of mirror curvature, a displacement x — > x + C&n x with a > brings 
the segments closer together in the mirror plane. This relative displacement along an unmodeled 
degree of freedom slightly affects the measurement, although nominally it should not. Even with 
a flat mirror, mechanical constraints could induce systematic deformations of the segments or of 
their supporting structure, thus affecting the output through misalignments of sensor pairs even 
if the modeled x-difference does not change. Residual sensitivity to absolute state also seems 
plausible e.g. for relative pressure or temperature sensors. All such errors can break the relative 
sensing symmetry and thereby severely limit the performance of the feedback system. 

4 Spatially invariant systems 

Even though they do not require spatial invariance, the performance limitations described in 
the previous section take a simpler form under that additional hypothesis because they lead to 
insightful expressions in the spatiotemporal frequency domain. We refer the reader to [H |31 HH H] 
for system analysis of (LTSI) linear time-invariant and spatially invariant systems. 

The hypothesis of spatial invariance requires that all subsystems are equal and repeat an 
identical interconnection pattern. It restricts the controller^ but it does not impose distributed 
control. We take N — 1 (1-degree-of- freedom subsystems) for simplicity, but we allow spatial 
invariance on a 7-dimensional toroidal structure. The system is then completely decoupled in 
spatiotemporal frequency domain, so we use the Fourier transform instead of the singular value 
decomposition; the real/orthogonal matrices of Section [3.11 then become complex/unitary, with no 
added difficulty 

Our notation indexes subsystems in the toroidal spatial structure by k = (fci, fc2, ..., fc 7 ) G 
V := {1, ..., Mi} x {1, ..., M 2 } x ... x {1, ..., M 7 } with M x M 2 ... M 7 = M. Localized measurement 
allows subsystems j and k to be connected through B only if their indices are close, e.g. if \(j a — 
fc a )mod(M a )| < p' for all a G {1,2,..., 7}, with p' related to p. We denote C = { I G V : 
3 sensor comparing subsystems k and (k + ^)mod(-Mi, ...,M 7 ) , Vfc }. We write D the number of 
sensors involving one given agent, such that e.g. N y /M = D/2. 

Under spatial Fourier transform, the closed-loop equation §5§ decouples into a set of (spatial) 
modes 



! Although, optimal control solutions for spatially invariant plants yield spatially invariant controllers [!]• 



(a) (b) i_ _ _ _ 

_-H --- -f 

Figure 4: Schematic representation of eigenvectors of L for a 1-dimensional SI plant, similarly to 
Fig. |31 (a) £ ~ 0, long-range deformation; (b) £ = n, short-range. 

indexed by spatial frequency £ = (£1,^2, ■■•,£7), with £j e { "^f- : fc = 0, 1, ,..,Mj — 1}. The 
following result holds, assuming that each sensor measures the difference between two state values; 
i.e. each row of B contains one element +1, one element —1 and the rest zeros. 

Lemma 2: If n(s) is distributed according to a zero-mean Gaussian of covariance a 2 Jjv , then 
ff(s) is distributed according to a zero-mean Gaussian of variance <J 2 / \^ where 

\ = 2 EK sin ( |T (/ 2 f for each ^. (12) 

cMj -, , 



'2D~fp' 7T ' 



For any local interconnection structure, given c>C 1 there are at least w c := IX7 =1 (2floor(- 
1) frequencies £ for which v^ has variance at least a 2 /c 2 . 

Proof. Lemma 1 remains valid with the Fourier transform replacing the SVD. Then we have 
A^ = Bt -Bf, where B^ G C D / 2 is the ^-component of the spatial Fourier transform of B. Com- 
puting the latter analytically yields (|12|) . Bound w c , which is not tight for 7 > 1, is obtained by 
counting all £ = (nrp-, ■■■, -jt^-) for which j4- <£ (ci, 1 — c±) Vj, then redefining c = \f2D"fp'itc\. 



D 

The detrimental low A^ occur for frequencies £ close to modulo 27r, i.e. low spatial frequencies, 
corresponding to deformation modes of large characteristic length. Their poor observability can 
be understood as B measuring a spatial derivative of the deformation [53] ; see also Figure [U 

Regarding model errors, we can explicitly compute $ if we restrict also A to be spatially 
invariant. This does not give as strong possibilities as for Proposition 2, but it still highlights a 
robustness issue. 

Lemma 3: For a spatially invariant uncertainty A as in ©, the possible $ in an analog of ([7)1 
diagonalized in spatial Fourier modes, are diagonal and include all /?<£> with /3 € [— 1, 1] C K and 

e V l(=/ . sin(F£/2) 2 • . ,,* , 

W « = Y^MfW " T *"* ? (13) 

Proof. We have $ = A~ 1 [Q*B T (Q®I)] [(Q* ®I)AQ] where Q encodes spatial Fourier transform. 
Then [Q* B T (Q<E)I)] is a vertical concatenation of D/2 diagonal matrices: each one contains Fourier 
components 2ie~ l1 £/ 2 sin(7 T £/2) of all £ for a given I £ L (avoid double counting). Taking 'bad' 
(A) mj „ = f3e(B) mtn for all m,n, we get \{Q* <E)I)AQ] a horizontal concatenation of D/2 diagonal 
matrices with Fourier components 2e a ^/ 2 cos(Z T £/2). D 

Since all I are restricted to small values by local sensing, for a low-frequency £ every term of 
the sum in the numerator is multiplied by a large factor i / ta,n(l T £/2) with respect to the sum 
in the denominator, so the model error can have a dominant effect. Like for the general case, a 
'bad' A is one that changes the 'meaning' of the measurement, i.e. that violates ([TU)) . 'Bad' A 
have the following effect on robustness margins that account for other uncertainties in the system 
(e.g. neglected dynamics, controller sampling / quantization, spatial invariance approximation). 

Proposition 3: Consider that robustness margins must be ensured under all spatially invariant 
measurement model errors A as in (OJ). Then the Nyquist plots of the nominal system (A — 0), at 
each spatial frequency £, must avoid enlarged "exclusion zones" as depicted on the right of Fig\S\ 
In particular, for any given e, k > and fixed lattice dimension 7, there exist critical network sizes 
M c ,(i) and M c uj\ such that 
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Figure 5: In light red, zones to exclude for Nyquist plot of K^(s) to have (top) a gain margin 
g m and (bottom) a phase margin <p m . Left: no/negligible sensing uncertainty, K^(s) must avoid 
circling — 1. Right: "bad" sensing error /?$ from Lemma 3, -JQ(s) must avoid circling an arc of 
circle (thick blue) that approaches £ C up to 2arctan(l/|$)^^|). [Plot values: g m = 2, <f) m = 7r/4, 
M = 100, s = 0.05 and £ = lj, ID nearest-neighbor coupling.] 



(%) For aH ill > M c u\, the set not to be encircled for nominal closed-loop stability, analog to —1 
in a SISO system, has points in a n-neighborhood of the origin for some £ =/= 0. 
(ii) For all M > M c u{\, the exclusion zone to ensure a phase margin <j) m — k crosses the imaginary 
axis for some £ ^ 0. 

Proof. Encirclement of —1 by the Nyquist plot of K^(l + /3$g) — for $ as in Lemma 3 and 
/3 £ [— 1, 1] — is equivalent to encirclement by K^ of the set S^ = {— l/(l+/8($)^) : /? £ [— 1, 1]}. 
The latter set is an arc, extending by an angle # = 2arctan(|$)^.^|) on each side of the point — 1, 
on a circle of radius 0.5 centered at —0.5 £ C The exclusion zone to robustly guarantee a gain 
(resp. phase) margin g m (resp. <f) m ) is obtained by rotating this arc around £ C by all angles 
in [— <j) m , 4> m ] (resp. scaling this arc towards by all ratios in [l,g m ]), see Fig. [5] A large enough 
system allows low enough £, such that |$)^^| defined by (|T3"f can get arbitrarily large, for any 
given e. Then S^ tends towards a closed circle tangent to the imaginary axis, from which (i) and 
(ii) directly follow. □ 

Proposition 3 shows how the spatially invariant measurement errors of Lemma 3, although 
not directly destabilizing, strongly diminish the robustness margins of an integral controller on 
low spatial frequencies £. For those £, the combination of A with phase & gain margins creates 
a kind of 'trap' around the origin: the zone to avoid has an angular extension from ~ n/2 — cj> m 
through 7r to ~ 37r/2 + cf> m and its inner radius can be arbitrarily close to for all angles in 
[f — <t> m , ^+4>m] U [j-^ m , ¥f-+<f> m ]- The following case study shows how, when spatial invariance 
is not imposed, worse situations as described in Section [3] can indeed occur in practice. 



5 Case study: European Extremely Large Telescope pri- 
mary mirror stabilization 

The ideas worked out in the present paper are inspired by our study of the EELT primary mirror 
controller for and with ESO, which included review, proposal & tuning of control schemes, fault 
detection and isolation, practical specifications,... 7.. In the following, we show that the EELT 
system features the performance limitation issues studied above, and illustrate how they affect 
controller design. This supports the relevance of our observations for applications. More details 



10 



3.34 



0.334 



■< 



0.0017 




1000 2000 2693 2948 
k 



Singular values of B, i.e. the diagonal elements X k of A 1 ' 2 , in logarithmic scale. The 



Figure 6 

last 4 modes are unobservable (Xk 



for k = 2949 to 2952, beyond plot limits). 



about the controller are given in the appendix. 



Model details The general model ((TJ) allows to include slight differences among segments (de- 
pending on their place in the mirror) and dynamical interactions through vibrations of the mirror- 
supporting structure ("backstructure"). Dynamics are however dominated by a static component 
plus mechanical oscillation of the actuators, such that we take G(s) block-diagonal, with 3x3 
blocks 

G {s)^(s 2 J + sb + k)- 1 k (14) 



where k £ R is actuator stiffness, b £ R gives (very small) dissipation, J £ 



p3x3 



represents 



segment+actuator inertia matrix. Characteristic values for this mass-spring-damper subsystem 
are oscillation frequencies around 50 Hz, with ~ 1% modal damping. The dominance of low fre- 
quency disturbances and the difficulty of high-frequency plant characterization (e.g. backstructure 
vibrations) motivate a low-bandwidth model & controller. We recall that the latter must seek an 
optimal tradeoff in presence of Gaussian white sensor noise n with covariance matrix a 1 /5604 and 
a = 1 nm/VHz. A measurement model uncertainty of the form ([5]) is realistically expected, with 
e up to 0.01 and possibly all-independent components (see paragraph after (fj"0)) ). We recall the 
main disturbances in d: 

• Mounting/wear errors and deformations due to gravity acting differently as the mirror moves, 
are static but large (micro- to millimeters), and mostly expected to be spatially uncorrelated. 

• Wind force is concentrated on low temporal frequencies, but it features strong long-range corre- 
lations in space, i.e. predominantly low spatial frequency. This is unfortunately where the above 
results suggest that the controller will be the least efficient. 



__ 1 In 

Limitations from distributed sensing Figure H] shows the singular values X k of B, in 
logarithmic scale. The last four modes are unobservable, A^ = for k = 2949, ..., 2952 (thus 
Ao = 2948); they consist of full mirror translation, rotations and "defocus", and have to be 
addressed by other telescope subsystems based on wavefront sensing (see e.g. [8]). Among the 
observable modes, some indeed have very small Xk — e.g. the last 260 modes have a Xk < 0.01 Ai. 
Such bad signal-to- noise ratio makes the performance limitations as expressed in Section 13.11 rele- 
vant. The corresponding deformation modes (rows of Q as B T B — QAQ T — not shown here due 
to space constraints) feature oscillations of long characteristic length; the modes of the first Xk in 
contrast wildly oscillate from one segment to its neighbor. 

Regarding robustness, due to the large number of subsystems, the already tight error budget is 
insufficient to exclude all dangerous A: applying the procedure described in © to b = 2948, we 
get a $ with one (exact) eigenvalue at —9.7. Thus large K(s) — e.g. controllers with an integral 
term — would bear the danger of instability, unless we can further reduce model uncertainty by 
a factor of at least 9.7. This analysis agrees with the observations of [21 . 
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Disturbance-rejecting controllers We start from integral control Kjj s to reject the expected 
low- frequency disturbances, but have to add integrator leakage Ai, yielding Kj/(s + Aj) 1 to limit 
|i^(s)| for robustness. A double-pole is added to further damp the high-frequency resonance peaks 
due to the low damping of the actuator oscillator in p^|) . This finally gives 



C(s) 



1 



-Ki 

s + Ai (s/p+1) 2 



(15) 



The second factor is a scalar, with fixed p — 2ir 20 rad/s. For the first factor, we have analyzed two 
options: a centralized controller, based on diagonalization of the system into spatial eigenmodes 
(see Section |3]); and a distributed controller, using only neighboring measurements to determine 
local control actions, tuned in spatial frequency domain (see Section 0|. The trade-off between 
robust stability and disturbance rejection makes integrator leakage an essential tuning parameter. 
The centralized controller is analyzed in the so-called modal basis, obtained from the SVD 
decomposition of B by x = Q T x ("deformation modes"), Q T u, U T y. Both the integral gain kj 
and the integrator leakage bj are taken diagonal in this basis, writing their components K[{k) and 
Aj(k), with k = 1,2, ..., 2952 in order of decreasing A&. Due to the distributed sensing, small Xk — 
which indeed correspond to mirror deformations of large characteristic length — are sensitive both 
to noise and to model uncertainties, and this limits the control performance. Figure [7] shows the 

1 



k k\ ~ j= t~T~, TT resulting from our robust 



steady-state disturbance rejection |(5(0)) 



1 + >Afctfr(fc)Mj(fc) 

tuning. For modes k where leakage was not necessary \{S(0))k,k\ = 0, our ideal target, but for the 
modes of lowest Xk rejection of static errors becomes illusory: the static sensitivity is almost one 
for the last modes, e.g. \(S(s = 0))jv Oi jv o | « 1/(1 + 0.0017*5.7/0.7) = 0.986. 




2896 
mode index k 



Figure 7: DC gain of disturbance-to-state transfer function, |(S'(0))fcfc|, with centralized control 
in modal basis. 

Because the performance limitations are independent from the controller design, one might 
wonder whether a distributed controller — relying on local information only — can attain the 
same performance as a centralized one. Benefits of distributed control include local communi- 
cation requirements, arguably better robustness to failures, and a simplified design method that 
builds directly on the physical distributed spatial structure, rather than on mathematically di- 
agonalizing a large system matrix. We therefore design a controller where (u)k depends only 
on measurements made at the edges of segment k and of its immediate neighbors. We further 
approximate the mirror as invariant w.r.t. translations from one segment to another invariant 
(after all our basic model is, except at the mirror boundaries). This allows us to use the LTSI 
(Linear Time- and Space-Invariance) method described in [H [3SJ H3] for efficient controller tuning 
in spatiotemporal frequency domain. The performance limitations owing to distributed sensing 
are illustrated by considering how a local controller would estimate the overal mirror deformation 
from local measurements. Indeed, the same (or similar) local sensor values can indicate global 
deformations of very different magnitude, depending on how they have to be extrapolated. Figure 
[5] depicts the most extreme case, where in a linear spatial structure, situations a and b would give 
the same ES signals, while a is a much larger global deformation than b. 
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Figure 8: Spatial Fourier modes in a linear spatial structure with two degrees of freedom: piston 
and tilt. At low spatial frequency, a high- amplitude piston mode (a) gives the same ES signal as 
a low-amplitude tilt mode (b). 

Properties of the distributed controller for an LTSI model of the mirror are further illustrated 
on the static sensitivity S*(£, S = 0), the equivalent of Figf7]for centralized control. Tip and tilt 
Fourier modes are all sufficiently observable in the two-dimensional spatial structure to allow zero 
leakage (not represented) ; lower observability at high spatial frequencies however requires to limit 
Kj. For piston, Kj is limited at low to moderate spatial frequencies and, most notably, leakage is 
necessary at low spatial frequencies and induces large S* , as shown on Fig. [9^. Figure [9}d shows 
the maximum real part of closed-loop poles of the MIMO system with uncertainties. The tradeoff 
resulting from distributed sensing is clearly visible: at low spatial frequencies, where piston features 
performance-limiting leakage, the closed-loop poles are pushed against the robustness limit. 



Disturbance-to-state sensitivity 




0.5 -025 0.25 0.5 



b 0-5 



Maximum closed-loop pole [Hz] 




Figure 9: LTSI approximation properties of the distributed controller resulting from automatic 
tuning. See text for details. 



Simulations We have simulated the controllers on a realistic model of the full telescope, com- 
posed of 20000 states extracted from a comprehensive finite element model. The plant+controller 
model is subjected to a representative wind profile and to 1 nm/yHz sensor noise. The result- 
ing behavior is believed to be quite realistic. The limitations induced by distributed sensing do 
show up in these realistic simulations. When setting leakage Aj to zero, simulations with 'bad' A 
constructed with ([9]) indeed feature unstable behavior, both for centralized and distributed con- 
trollers. And on the nominal system (with A = 0), choosing a constant closed-loop gain Ki{i)\f\i 
over all modes causes so much noise amplification in the realistic model that closed-loop perfor- 
mance is worse than in open-loop. This illustrates the reality of distributed sensing performance 
limitations. 

Proper control design does improve however the performance of the feedback system — within 
the limits imposed by distributed sensing. We can estimate realistic disturbance rejection by 
taking the ratio of two simulation results, one with controller and one in open loop, with the same 
disturbance (wind) input. Figure [TU] shows the result for two representative deformation modes. 
The curves are in good agreement with the prediction of the disturbance-to-state transfer function 
\{S{s))i^\ 2 under centralized control. (Poorly meaningful high-frequency values are due to quasi- 
null disturbance input.) For the large-scale deformation mode 2900, the distributed controller 
performs slightly worse than the centralized one; the latter already does not reject much due to its 
large Ai(i) and low Kj(i)y/Xi. Overall, both controllers achieve similarly good rejection on small 
spatial scales and bad rejection on large spatial scales. In the EELT implementation, adaptive 
optics is added to the distributed sensing-based controller in order to reject the strong low spatial 
frequency disturbances and reach the overall 10 nm precision requirement. 

The simulations confirm that, under distributed sensing, the larger freedom offered by cen- 
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C. Wavefront error after AO 
centralized 2.8 nm 
distributed 2.8 nm 
uniform gain 20 nm 
open-loop I 16 nm "\ 

\AO inoperative / 
frequency [Hz] 

7o° lO 1 

Figure 10: A. Ratios of power spectral densities in the wavefront error associated to deformation 
mode i = 1000, for a realistic EELT model subject to representative wind and sensor noise: blue 
solid curve [centralized control] / [open loop]; green dashed curve [distributed control] /[open loop]. 
Red dashdot curve represents |(S'(s))i i i| 2 = I , A n . R- n /T~ l 2 ' w ^h Ai(i) — and Ki(i)y/Xi = 
Hz from modal tuning. B. Same plot for deformation mode j 
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Ki(j)y\j = %^ Hz. C. Overall root-mean-square wavefront error in the simulations, including a 
filter that models adaptive optics (AO) corrections. This effective filter is fictitious in open-loop, 
as high spatial frequency errors make AO unusable. 
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Figure 11: Gain given to sensors j — 1...5604 in the centralized control input of segment i (fixed 
to a typical value), as a function of distance to segment i. 

tralized control — information transmission over large distances — does not allow for significant 
improvement over the distributed controller for this application. In agreement with similar theoret- 
ical investigation in [3] , properly designed centralized controller gains are naturally "distributed" : 
the gain from measurement at sensor j to input at segment i quickly decreases with the distance 
between j and i, see Fig. [11] 



Remark Spatiotcmporal correlations also show up in model approximations. To avoid exciting 
actuator-backstructure dynamics at a; Hz, a rule of thumb is to impose a closed-loop bandwidth 
below ^ Hz. In the finite-element model of the full telescope, low temporal frequency vibration 
modes turn out to also have low spatial frequency. As a result, vibration modes significantly 
coupled to deformation modes i = 1 to 2692 have frequencies above ~ 30 Hz, allowing 3 Hz 
maximal control bandwidth. Only deformation modes i > 2693 are coupled to lower temporal 
frequency vibrations — down to ~ 3 Hz — and should thus be restricted to 0.3 Hz bandwidth. It 
is remarkable that these bandwidth restrictions coincide with closed-loop gain restrictions imposed 
for noise limitation. 
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6 Conclusion 

This paper highlights how important limitations for linear control of distributed plants arise di- 
rectly from local relative sensing technology, even in the absence of any (e.g. communication, 
decentralization) restrictions on the controller. We specifically show how distributed sensing can 
severely degrade the tradeoff between disturbance rejection and robustness to noise and to model 
uncertainties. The viewpoint allows correlations among subsystems and among disturbances. We 
illustrate our developments on a realistic application (European Extremely Large Telescope) . The 
latter simulations suggest that with distributed sensing, distributed controller", computing each 
control input from local outputs, achieves performance sensibly equal to an unrestricted central- 
ized controller. This could lead to a complementary viewpoint on distributed controllers' apparent 
adequacy for locally coupled distributed systems (see [3]), namely as exploiting performance close 
to its limits imposed by distributed sensing. An exact study of the interplay between distributed 
sensing and structural limitations on the controller (distributed, leader- follower,...) could be inter- 
esting for future work. The role of relative sensing in this context has recently attracted attention, 
see e.g. [24 , 3 . "Boundary conditions" reminiscent of PDEs can also play an important role [2"2"lfl"7] . 
The paper more generally highlights the role of different sensor types for controlling distributed 
systems. A controller that relies on absolute state measurements ("centralized sensing") needs a 
common physical reference and achieves control performance uniform over all spatial frequencies. 
In multi-scale problems, the measurement accuracy attainable in this way may be insufficient and 
localized relative sensing is then used. But this seems to follow a waterbed effect: it improves con- 
trol on spatial small-range signals at the expense of degradation on long-range signals. Centralized 
and distributed sensing are thus different spatial filters whose adequacy depend on the objective. 
The final EELT performance is obtained by combining the control loop of Section [5J based on lo- 
cal edge sensors, and an adaptive optics controller based on a centralized wavefront-sensing. This 
suggests to combine sensors on a hierarchy of spatial scales for challenging distributed systems 
applications. For instance, a clever combination of relative position sensors and crude GPS could 
similarly be envisioned for better automated traffic control. 
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Appendix: design of the controllers 

Centralized controller Modulo approximating the high-frequency actuator resonances, both 
G(s) and B are diagonal (concatenated with appropriate all-zero matrices) in the modal basis x = 
Q T x, Q T u, U T y, so taking ki and bi diagonal in this same basis seems justified. The unobservable 
modes cannot be controlled with this system: Kj(k) = for k = 2949 to 2952. The remaining 
components 1, 2, ..., Nq — 2948 are tuned as follows. 

First, we discard leakage and assume that 6 has the same order of magnitude for all k; this 
is justified for the "mounting error" part of 8 (statistically independent among segments, thus 
uniformly distributed in any basis) , and anticipates that leakage will appropriately lower the gain 
for the larger fc, where the wind disturbance part is smaller. For low k, the noise is negligible in 
Eq. ([5]) . The disturbance effect is brought down to a given value on all modes by taking the same 
{K)k,k = Kq, which translates into 



K^k) = Ko/^Xt , k = 1, 2, ..., 2692 . (16) 

That is, less observable modes need larger gain. For large k, although a 2 is very small, Vk oc <j/\f\k 
gets large and noise amplification makes the choice (fT!)]) ineffective. The noise effect is limited by 
imposing {K)k,k — Ki\/~\~k, i.e. decreasing closed-loop gain, which translates into K](k) = K\ 
constant for k > 2692 (where ^/\u < 10\/Ai). Our simulations take Kq = 14.4 rad/s, K\ = 
5.7 rad/s. 

Then we tune Ai(k) with the approximate procedure around Proposition 2: for each k, we 
build a 'bad' A according to ©, and assume that $ « $& as in ©. Writing the low- frequency 
approximation x = G ■ K • y f=a 1 • * ■ y in time domain and replacing y yields 

f t {x)k = - (lCr(fc)VAfc(l + M + A/(A)) (£)* = -fik {x)k ■ 

We hence impose Ai(k) = max{p — Kj(k)y/Xk(l + (j)k)} to get — fik < —po = — 0-1 Hz. This results 
in nonzero leakage for k > 2846, with maximum Aj(Nq) — 0.7 rad/s. A numerical computation 
confirms that the exact closed- loop eigenvalues with this A are below —po- 

Distributed controller To gain more insight, we factorize the controller into two steps. First 
each segment computes a local estimate ik £ K 3 of its own state from the ES measurements at 
its boundaries. Then a local state-based controller computes (u)k £ K 3 from the estimates Xj of 
itself and of its immediate neighbors. This fulfills the requirement to have (u)k depend only on 
measurements made at the edges of segment k and of its immediate neighbors. 
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The controller structure, plant dynamics, and measurement operator are all invariant w.r.t. trans- 
lations from one segment to another, except for segments close to the mirror's boundary. Our spa- 
tial invariance assumption thus (i) approximates the mirror as being infinite or periodic and (ii) im- 
poses spatially invariant controller parameters. The system then decouples into one 3-dimensional 
(piston, tip, tilt)-system per spatial frequency. We adapt the LTSI method of [H [3SJ [T3] from its 
standard SISO-subsystem formulation to this MIMO-subsystem setting in a straightforward way. 

The local estimation Xk is computed by pseudo-inverting, at each segment, the 12 x 3 local 
matrix linking the 12 sensors at its edges to its own 3 degrees of freedom only. This amounts to 
segment k assuming that its neighbors are perfectly positioned and only itself is displaced. That is 
of course not correct, so the local estimator acts like a hrst spatial filtciQ reflecting the difficulties 
of distributed sensing described with Fig. [31 As a consequence, the chosen estimation filter will 

- couple piston, tip and tilt (i.e. it estimates a tilt component in x for a pure piston deformation 
x); 

- underestimate piston (resp. tip, tilt) dominated deformations of low (resp. high) spatial fre- 
quency; 

- slightly overestimate piston (tip, tilt) dominated deformations of high (low) spatial frequency. 
We denote the state-to-estimation transfer function (x)^ — H*(£, s)(x)^, such that H*(£,s) is 
a 3 x 3 transfer function matrix for each depending on £ (two-dimensional spatial frequency) 
and s (temporal frequency). Our static plant approximation makes H* static, so it is trivially 
spatiotemporally factorized, as required for efficient tuning (see [14] ). 

Restricting the controller (|15[) to local coupling, spatial invariance, and symmetry w.r.t. axes 
reversal, we get in spatial frequency domain: 

K i(0 = k <* + fc/3Cos(£i) + fc 7 cos(£ 2 ) + fc<5Cos(£i-£ 2 ) 
A*i(Q = a a +a /3 cos(£i) + a 7 cos(£ 2 ) + a 5 cos(£i-£ 2 ) 

where ki, a%, i € {a,/?, 7, 5}, are 3x3 matrices to tune. The LTSI tuning is performed in two 
steps. First, we approximate that H* is diagonal, i.e. it leaves piston, tip and tilt uncoupled. This 
allows to directly apply the SISO tuning method of [25], using a large but linear optimization 
setting that minimizes leakage under robust stability and disturbance rejection constraints. We 
set the latter according to expected d and n on spatiotemporal frequencies and impose robustness 
as for centralized control: closed- loop eigenvalues < — po = —0.1 Hz with any model uncertainties 
A. The spatial invariance approximation requires to include extra robustness, so we increase e 
to 2.5%. In a second step, we add a stability constraint for the nominal MIMO system (H* not 
diagonal, A = 0). This yields a set of nonlinear constraints. The nonlinear optimization is solved 
locally, starting from the solution of the first step. 

The designed controller is analyzed on the exact full system to confirm that its good properties 
hold despite the LTSI approximation in its design and tuning. Our accurate simulations show that 
the designed controller works well in this case. It thus seems that the system with less than 40 
segments diameter and a hole in the middle (see Fig. [T]) can be nicely approximated as spatially 
invariant in practice when the controller coupling is sufficiently local. 



4 Other spatial filters can be envisioned — the central estimation is one, other options are proposed in |20| 
but none will alleviate the limitations imposed by the distributed sensing technology. 

18 



